Hi,

Re-sending a message with the relevant bits:

On a different note, somewhat off-topic, I'm going to enable by default
both fileassoc(9) and veriexec(9) in GENERIC. Reasons being that unless
Veriexec is actually *used* it doesn't hurt to have it there, and having
it enabled by default makes them more accessible.

Here are differences in kernel sizes. Base kernel is GENERIC with
DEBUG/DIAGNOSTIC/DDB/LOCKDEBUG:

   text    data     bss     dec     hex filename
8042325  332064  434008 8808397  8667cd base
8045261  332064  434072 8811397  867385 base+fileassoc
8056685  332096  434136 8822917  86a085 base+fileassoc+veriexec

Are there any objections for this?

-e.

-- 
Elad Efrat